Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: Nu1Lm6RbwSiFJ56tsPS9vubmkVQJqXt/e04wwCQWbeg=
Subject key identifier: 8D:48:F3:B6:E4:AD:50:00:D2:AA:BC:00:A0:B9:AB:27:F4:E5:DB:4D
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 01A14F87A185E3D9FA4B69591441F7A17C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 0863
Signing time: Sun 18 Oct 2026 15:00:51 +0000
Manifest this update: Sun 18 Oct 2026 15:00:51 +0000
Manifest next update: Mon 19 Oct 2026 15:00:51 +0000
Files and hashes: 1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: 5ehbmPDpTAawY1NEe+TrguKv4jVYlL9pDLiIG+4CEfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 19 Oct 2026 15:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4f:87:a1:85:e3:d9:fa:4b:69:59:14:41:f7:a1:7c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Oct 18 15:00:51 2026 GMT
Not After : Oct 19 15:00:51 2026 GMT
Subject: CN=8d48f3b6e4ad5000d2aabc00a0b9ab27f4e5db4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e6:e7:59:51:bf:a5:dc:22:25:7a:fe:a0:70:
65:58:35:01:38:ab:bf:46:fe:69:26:0a:8e:2c:e3:
be:18:73:e4:10:91:d0:43:4b:91:d3:d8:ba:6e:92:
bc:bb:96:1d:fe:44:5e:6e:5c:3c:eb:58:d1:40:52:
b3:d4:c6:6a:d7:84:28:2e:85:d5:67:ba:33:e4:ef:
4e:3a:9c:8b:65:a3:a3:50:af:f6:da:27:b2:1d:b8:
56:0c:5c:d1:9f:50:5a:d6:db:10:c4:38:78:12:f0:
4c:97:b9:b2:d7:f7:22:43:1d:ed:7f:a9:f7:37:2b:
ec:16:4e:73:af:aa:29:ef:00:09:15:21:03:a3:9a:
26:62:83:90:da:2b:ba:98:fe:0f:3f:d2:ab:3e:6f:
cf:e6:91:e9:77:23:d7:54:ee:c0:a1:4a:13:dd:b6:
df:01:05:d8:34:87:2f:60:f9:c4:8b:9d:f0:53:f3:
d4:d8:09:21:a8:1c:b4:2b:29:ef:27:9d:00:b6:ec:
23:2f:94:66:da:9a:94:15:fd:77:20:06:ec:dd:3a:
64:0c:62:b8:a0:cf:c8:f4:cd:73:66:9c:44:8a:81:
b4:d4:f4:2b:04:ca:04:7f:df:82:9b:16:c0:05:ae:
e0:d5:ee:d5:f8:4c:14:82:96:19:34:4f:76:68:fb:
f7:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:48:F3:B6:E4:AD:50:00:D2:AA:BC:00:A0:B9:AB:27:F4:E5:DB:4D
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cd:9e:b4:45:88:7d:fd:d7:75:d0:43:0e:62:8d:ec:58:0e:
86:eb:16:1e:90:eb:f4:af:ed:fb:73:47:51:88:89:3a:a4:f6:
78:99:51:f2:5e:f3:e5:3d:1e:71:8f:45:1d:cc:27:a7:ea:2f:
d7:e6:4d:06:5f:7d:a5:88:35:cc:0f:28:9a:bf:39:30:57:5f:
f1:29:ed:ab:66:df:49:c8:c9:ae:b3:1c:24:79:25:89:89:1e:
16:ef:71:bd:4e:1b:8f:34:e9:d1:26:43:cc:f4:7b:64:99:83:
73:70:dc:aa:fa:68:0b:6f:3d:0c:8b:94:54:6c:0f:e6:f9:15:
e2:ab:5c:19:52:86:81:62:3c:8f:52:ee:ab:cb:90:63:96:42:
c2:d2:55:28:58:54:f4:48:26:99:45:95:c4:a8:b8:26:da:84:
bc:58:34:b7:e5:9b:8d:f3:c9:53:ab:66:4a:95:3f:99:2e:79:
2d:0b:e3:16:e0:02:7e:80:22:fc:38:9c:a2:8c:bb:c9:53:13:
4f:76:c1:7b:52:ee:db:9d:56:00:21:9b:ce:c8:89:29:24:ef:
d0:c1:70:ca:fd:1a:8e:d2:37:d9:3c:a2:38:d6:21:93:fa:1c:
e9:b4:f8:80:29:9e:3e:2e:de:00:48:7d:2b:c7:2e:34:fe:8e:
af:ae:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 01:41:15 2026 by rpki-client